d/rules: disable CONFIG_SYSTEM_TRUSTED_KEYS config

we do not use module signing currently.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2021-02-26 13:41:09 +01:00
parent cbc90f2383
commit 77470417db

1
debian/rules vendored
View File

@ -73,6 +73,7 @@ PVE_CONFIG_OPTS= \
-d CONFIG_UNWINDER_ORC \ -d CONFIG_UNWINDER_ORC \
-d CONFIG_UNWINDER_GUESS \ -d CONFIG_UNWINDER_GUESS \
-e CONFIG_UNWINDER_FRAME_POINTER \ -e CONFIG_UNWINDER_FRAME_POINTER \
--set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\
-d CONFIG_SECURITY_LOCKDOWN_LSM \ -d CONFIG_SECURITY_LOCKDOWN_LSM \
-d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \ -d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
--set-str CONFIG_LSM yama,integrity,apparmor \ --set-str CONFIG_LSM yama,integrity,apparmor \